06941006da47785e4f9e791b18082bdb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06941006da47785e4f9e791b18082bdb
Size

60KB
MD5

06941006da47785e4f9e791b18082bdb
SHA1

51c779c14fd94155ea18085d06ca7b0076a200c8
SHA256

42bacd5eeedbd12d7a1ccd0760b6a7ff1a63f19bfb0f8a1154c6a4f57c63a36c
SHA512

de56e11eb55be30faba081194a6dbdf6b159300943e428f67ab2295092073d38fe4facf178f1af7e81072cf95cbebdf0b89d2c8046f43b9f854ce48b867ca63d
SSDEEP

1536:HRS452FIhwHIG571Zpw25L0zF/w12T30S5z4+:ROIGHdZpw2dO/w12Tk3+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06941006da47785e4f9e791b18082bdb

Files

06941006da47785e4f9e791b18082bdb
.exe windows:4 windows x86 arch:x86

4570078414eeee7603d6f3927d6d17c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory

msvbvm60

ord583
MethCallEngine
ord517
ord518
ord666
ord593
ord594
ord520
ord709
ord631
ord632
ord526
EVENT_SINK_AddRef
ord529
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord712
ord606
ord607
ord608
ord717
ProcCallEngine
ord644
ord537
ord570
ord648
ord573
ord685
ord100
ord616
ord617
ord618
ord619
ord580

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ